---
title: "Update password policy."
method: PUT
path: "/v1/passwordPolicy"
tags: ["passwordPolicy"]
---

# Update password policy.

`PUT /v1/passwordPolicy`

Update the current password policy.

## Request body

- PasswordPolicy — Password Policy
  - `minLength` integer — The minimum length of the password.
  - `maxLength` integer — The maximum length of the password. (Setting this to any value other than 128 is no longer supported; this field may be deprecated in the future.)
  - `mustContainLowercase` boolean — If the password must contain lower case characters.
  - `mustContainUppercase` boolean — If the password must contain upper case characters.
  - `mustContainDigits` boolean — If the password must contain digits.
  - `mustContainSpecialChars` boolean — If the password must contain special characters.
  - `maxPasswordAgeInDays` integer — Maximum number of days that a password can be used before user is required to change it. Put -1 if the user should not have to change their password.
  - `minUniquePasswords` integer — The minimum number of unique new passwords that a user must use before an old password can be reused.
  - `accountLockoutThreshold` integer — Number of failed login attempts allowed before account is locked-out.
  - `failedLoginResetDurationInMins` integer — The duration of time in minutes that must elapse from the first failed login attempt after which failed login count is reset to 0.
  - `accountLockoutDurationInMins` integer — The duration of time in minutes that a locked-out account remained locked before getting unlocked automatically.
  - `requireMfa` boolean — If MFA should be required to log in. By default, this field is set to `false`.
  - `rememberMfa` boolean — If MFA should be remembered on the browser.
  - `disallowWeakPasswords` boolean — If weak passwords should be disallowed. By default, this field is set to `false`.

## Response `200`

Password Policy set successfully.

- PasswordPolicy — Password Policy
  - `minLength` integer — The minimum length of the password.
  - `maxLength` integer — The maximum length of the password. (Setting this to any value other than 128 is no longer supported; this field may be deprecated in the future.)
  - `mustContainLowercase` boolean — If the password must contain lower case characters.
  - `mustContainUppercase` boolean — If the password must contain upper case characters.
  - `mustContainDigits` boolean — If the password must contain digits.
  - `mustContainSpecialChars` boolean — If the password must contain special characters.
  - `maxPasswordAgeInDays` integer — Maximum number of days that a password can be used before user is required to change it. Put -1 if the user should not have to change their password.
  - `minUniquePasswords` integer — The minimum number of unique new passwords that a user must use before an old password can be reused.
  - `accountLockoutThreshold` integer — Number of failed login attempts allowed before account is locked-out.
  - `failedLoginResetDurationInMins` integer — The duration of time in minutes that must elapse from the first failed login attempt after which failed login count is reset to 0.
  - `accountLockoutDurationInMins` integer — The duration of time in minutes that a locked-out account remained locked before getting unlocked automatically.
  - `requireMfa` boolean — If MFA should be required to log in. By default, this field is set to `false`.
  - `rememberMfa` boolean — If MFA should be remembered on the browser.
  - `disallowWeakPasswords` boolean — If weak passwords should be disallowed. By default, this field is set to `false`.

## Other responses

- `default` — Setting the password policy failed with an error.

---

[API](https://skmtc.net/sumologic/apis/sumo-logic-api.md) · [All operations](https://skmtc.net/sumologic/apis/sumo-logic-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sumologic/sumo-logic-api/revisions/18a824df1e78/schema)